Unisvet
The website of Unisvet, managed by Byblis Medical Conference S.r.l., was compromised through a known vulnerability in a widely used WordPress plugin. D4 carried out an emergency remediation: it removed the malicious files, secured the affected accounts, closed the routes through which data was exposed and hardened the site, then delivered a complete security report. The site returned to safe, normal operation without disrupting live event registrations and course management.
The challenges:
- Malicious files were found on the production server, a sign of an active compromise
- User accounts were being used by unauthorised third parties
- Sensitive data was being exposed through leftover files and public endpoints on the server
- The clean-up had to happen without disrupting live event registrations and course management
Implementation
D4 first contained the incident. The malicious files were removed from the website and the server was checked for any further sign of compromise.
Next came the affected user accounts. Passwords were replaced, open sessions were ended and the long-lived access keys that survive a password change were revoked, so whoever had taken over those accounts lost their access.
D4 then closed the routes through which data was being exposed: files that should never have been reachable from the internet were removed, together with leftover temporary copies and downloadable plugin archives.
To reduce the attack surface, a synchronisation function was restricted to administrators and the public list of registered users was closed, while automatic synchronisation of completed orders kept working as before. Administrator credentials were also renewed.
The work ended with a complete security report for the client, covering the findings, the actions taken and recommendations for keeping the site secure over time.
Every step was planned around live event registrations and course management, which continued without disruption.
Results
All malicious files removed, data-exposure routes closed and a complete security report delivered to the client.
Was your WordPress site compromised, or do you want to prevent it?
Unisvet's site was cleaned, secured and brought back to normal operation, with live event registrations and course management unaffected and a security report to guide its ongoing care.
Related services
Malware removal
Fast intervention for compromised websites. Cleanup, recovery and protection to reduce downtime and prevent reinfection.
View service
Hosting, server & cloud
Reliable infrastructure, secure environments and optimized performance for websites and applications of any size.
View service
Web development & maintenance
Reliable development, structured maintenance and ongoing improvements for business websites and web applications.
View service